KR100862617B1 - System and method for checking personal computer's security - Google Patents

Abstract

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a PC security check system and method, which automatically performs security checks to protect a personal computer from computer hacking, viruses, worms, and Trojan horses, and notifies or treats vulnerable parts. The present invention automatically checks and repairs all security check items so that users without specialized knowledge of the computer can easily take action, and easily explains the vulnerable parts and treatment results to the user, thereby preventing damages from cyber attacks. It provides the effect of maintaining a state of the art PC that can be prevented and minimizes the threat of cyber threats to critical systems and services.

Cyber threat, worm, virus, hacking, security, policy, checklist, PC, computer

Description

PC security check system and method {SYSTEM AND METHOD FOR CHECKING PERSONAL COMPUTER'S SECURITY}

1 is a block diagram showing an automatic PC security check system and the overall flow according to an embodiment of the present invention,

2 is a flowchart illustrating a process of a check criteria management module according to an embodiment of the present invention;

3 is a flowchart showing a process of an automatic check module according to an embodiment of the present invention;

4 is a flowchart illustrating a process of a check result management module according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

101: user interface and GUI management module

102: check standard management module

103: automatic inspection module

104: latest information update module

105: system information collection module

106: log generation module

107 history generation module

108: check result management module

109: Auto Correction Module

110: statistics management module

The present invention relates to a system and method for checking PC security, and more particularly, to auto-check actions taken by a user to protect a personal computer from computer hacking, viruses, worms, and Trojan horses, and to inform the user of the results. In addition, the present invention relates to a PC security check system and method that can prevent damage caused by cyber attacks by automatically setting necessary settings.

Recently, with the rapid growth of information and communication technologies such as the Internet, cyber threats such as computer hacking, viruses, worms and Trojan horses are also increasing. As a result, measures to protect personal computers through anti-virus programs and firewalls are taken for granted. On the other hand, the critical tasks that need to be performed continuously after installation, such as keeping these programs up-to-date, periodically checked, and kept up-to-date with security patches, have not been properly checked.

This is because the information that needs to be set in order to increase the security safety of personally used PCs is difficult for general users to understand. That is, it is because it is not aware of the necessity of the various settings and the effects thereof, and it is required to establish the criteria for each setting to compensate for such disadvantages. Therefore, there is a need for a systematic technique that can protect personal PCs from unknown threats by establishing PC security setting standards for safe computing environments and checking whether they are set based on the criteria.

There are several programs and guidelines for improving the security and safety of personal PCs, but there is no way to continuously manage them or check or modify the settings.

Accordingly, the present invention has been made to solve the above-mentioned problems of the prior art, and an object of the present invention is to automatically check the steps that a user can take to protect a personal computer from computer hacking, viruses, worms and Trojan horses. It is to provide a PC security check system and method that can prevent damage caused by cyber attacks by informing the user of the result and automatically setting necessary settings.

PC security check system of the present invention for achieving the above object,

A user interface and a GUI management module for receiving a user input and managing a screen configuration;

An inspection criteria management module configured to configure security inspection criteria for a user and manage inspection criteria information;

A latest information updating module for updating the inspection criteria with the latest information at every automatic inspection execution;

A system information collection module for collecting system information from a registry, a file, and system setting information at every automatic inspection execution;

A log generation module for generating log information for every automatic check execution;

A history generation module for generating history information by using log information and check result information at every automatic check execution, and for showing the history information later if desired by the user;

An automatic inspection module that manages the latest information updating module, the system information collecting module, the log generating module, and the history generating module and generates inspection result information based on the inspection criterion information;

An auto-correction module for automatically modifying safety items for the inspection items requested by the user among the inspection results;

A statistics management module for displaying statistical data requested by the user using a history information in a graph or a table;

Inspection result management module which manages automatic correction module and statistics management module and displays or prints the inspection result information on the screen.

Characterized in that consisting of.

On the other hand, the PC security check method of the present invention,

It is to check whether the check item set by the user meets the criteria according to the established criteria.

(a) maintaining inspection criteria;

(b) managing log information after the start of the automatic check;

(c) searching for and updating whether the check criteria need to be updated with the latest information;

(d) collecting registry, file, and system configuration information;

(e) generating the inspection result information by comparing the collected system information with the inspection criteria information;

(f) fusing log information and check result information to generate a history;

(g) showing and automatically correcting the inspection result information;

(h) show history or statistics to date

Characterized in that comprises a.

Automatic PC security check system and method of the present invention for achieving the above object is developed for the Windows platform and can be operated by installing on a local PC.

The user may check or change the inspection criteria through the inspection criteria management module. The inspection criteria are the values that have been verified as safe based on the research results, but can be changed by the user.

The automatic inspection module is a module that actually performs automatic inspection, and operates a log generation module to record necessary items during operation, and checks the latest information, that is, inspection date, Windows security patch distribution information, and the like. After operating the update module to update the latest information, perform the automatic check that collects the system information and compares it with the inspection standard information. The result is recorded as inspection result information and the operation of the automatic inspection module is terminated by terminating the log generating module.

The inspection result management module summarizes recent security inspection results using inspection result information, automatically corrects inspection items to be safe according to a user input, or displays or prints statistics of the inspection results on the screen.

Hereinafter, a PC security checking system and method of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing an automatic PC security check system and the overall flow according to an embodiment of the present invention.

As shown in FIG. 1, the automatic PC security inspection system of the present invention includes a user interface and a GUI (Graphic User Interface) management module 101, an inspection criteria management module 102, an automatic inspection module 103, and latest information. Update module 104, system information collection module 105, log generation module 106, history generation module 107, check result management module 108, automatic correction module 109, statistics management module 110 It is configured to include.

The user interface and the GUI management module 101 are driven at the start of the tool, and process the user's input or display the screen according to the operation state.

The inspection criteria management module 102 reads the inspection criteria information and displays the inspection criteria information on the screen so that the user can check the inspection criteria.

The user can check the inspection criteria and immediately exit or change the inspection criteria value.

The automatic check module 103 generates check result information based on the check criterion information, and checks the latest information updating module 104, the system information collecting module 105, the log generating module 106, and the history generating module 107. Perform operation control.

The latest information update module 104 reads the check criterion information and retrieves the latest information. If the latest information update module 104 stores the latest information in the inspection reference information if there is the latest information that needs to be updated, it is terminated by the automatic inspection module 103.

The system information collection module 105 collects system information in the registry and is terminated by the automatic check module 103. The automatic check module 103 compares the collected system information with the read check criterion information, and generates as check result information whether the system information meets the check criterion information.

The log generation module 106 generates log information. The log generation module 106 continuously records the log information until the automatic check module 103 terminates the log generation module 106.

When the history generation module 107 is operated to generate history information, the automatic check module 103 ends.

The inspection result management module 108 reads the inspection result information, displays summary information of the latest inspection result on the screen, and performs operation control of the automatic correction module 109 and the statistics management module 110.

The automatic correction module 109 automatically corrects items that do not meet the inspection criteria, and the statistics management module 110 displays the statistics on the screen in graphs or tables.

Accordingly, the user checks the summary information and selects the item automatic correction, statistics city, screen printing, history city, and the end to operate the automatic correction module 109 or to operate the statistics management module 110 ( 405 or screen print 406, history plot 407, or check result management module.

Then, the PC security check method of the present invention having the above configuration will be described with reference to FIGS. 2 to 4.

2 is a flowchart illustrating a process of a check criteria management module according to an embodiment of the present invention.

As shown in FIG. 2, when the inspection criteria management module 102 is driven in response to a user input through the user interface and the GUI management module 101, the inspection criteria management module 102 reads the inspection criteria information (201). In step 202, the inspection criteria information is displayed on the screen so that the user can check the inspection criteria. Accordingly, the user can check the inspection criteria, immediately terminate or change the inspection criteria value (203 to 205). The change value of the check criterion value is stored in the check criterion information (206).

3 is a flowchart illustrating a process of an automatic checking module according to an embodiment of the present invention.

As shown in FIG. 3, when the automatic check module 103 is driven in response to a user input through the user interface and the GUI management module 101, the automatic check module 103 first starts the log generating module 106. (301). The log generating module 106 generates log information 302, and the automatic check module 103 continuously records the log information until the log generating module 106 is terminated. On the other hand, the automatic check module 103 starts the log generation module 106 and starts the latest information update module 104 (303).

The latest information updating module 104 reads the check criteria information (304) and retrieves the latest information (305). If there is the latest information that needs to be updated (306), the latest information is stored in the inspection reference information (307) and terminated by the automatic inspection module 103 (308). When the latest information update module 104 is finished, the automatic check module 103 reads the check criterion information (309) and starts the system information collecting module 105 (310).

System information collection module 105 collects system information from the registry (311) and is terminated by automatic check module 103 (312). The automatic check module 103 compares the collected system information with the read check reference information (313). The automatic check module 103 generates whether the system information meets the check criterion information as check result information (314), terminates the log generating module 106 (315), and then generates the history generating module 107. In operation 316, history information is generated in operation 317, and the operation of the automatic check module 103 ends.

4 is a flowchart illustrating a process of a check result management module according to an embodiment of the present invention.

As shown in FIG. 4, when the check result management module 108 is driven in response to a user input through the user interface and the GUI management module 101, the check result management module 108 reads the check result information (401). In step 402, summary information of a recent check result is displayed on a screen.

Accordingly, the user checks the summary information, selects the item automatic correction, statistics city, print screen, history city, and exit, and operates the automatic correction module 109 (404) or operates the statistics management module 110. Or 405, screen print 406, history plot 407, or check result management module 108.

Through the implementation of the present invention, the user can check the status of the PC by checking the check results at a glance, and can cope with cyber threats through the immediate setting for the necessary items.

Although the present invention has been described in more detail with reference to some embodiments, the present invention is not necessarily limited to these embodiments, and various modifications can be made without departing from the spirit of the present invention.

As described above, the PC security check system and method according to the present invention can easily check a user's PC status and enable immediate setting of necessary items, thereby enabling immediate response of the user to enable computer hacking, You can prevent or minimize the damage from viruses, worms, and Trojan horses.

In addition, a clear basis for the information that is the basis of the inspection is presented to the user, and if necessary, the user can be modified arbitrarily, allowing for flexible security management and easy maintenance after the classification by the module according to the function. In particular, it is easy to expand the items that can be checked. By using a registry that is difficult to access remotely to collect system information for security check and less likely to be tampered with by external attacks, there is an advantage that a safer and more accurate check can be performed.

In addition, users can receive integrated services automatically without any knowledge of the computer, and not only prevent security but also recover from failures to keep the system always optimized. In addition, the same advantage that the user does not need to know the security, but the user can change the check criteria can provide a more powerful function to those with knowledge of security. In addition, by showing the history information there is an advantage that you can check at a glance the security status of the computer over time.

Claims (6)

A user interface and a GUI management module that manages user input and controls a screen; An inspection criterion management module which displays inspection criterion information on a screen and is interoperable with the user interface and the GUI management module to enable the user to change the inspection criterion information; Generate log information and update the check criteria information to the latest information, generate check result information by comparing the check criterion information with system information collected from the registry, and use the log information and check result information An automatic check module for generating history information; And An inspection result management module for automatically modifying an item selected by the user or all items using the inspection result information, and displaying statistics using the history information as a graph or table through the user interface and the GUI management module. PC security check system comprising a. The method of claim 1, wherein the automatic check module, A log generation module for generating the log information; A latest information updating module for automatically updating inspection criteria information by searching for the latest information; A system information collection module for collecting system information from the registry, file, and system setting information; And History generation module for generating history information using the log information and the check result information PC security check system, characterized in that for controlling the start and end. The method of claim 1, wherein the inspection result management module, An automatic correction module for automatically correcting an item selected by the user or all items using the check result information; And Statistics management module that shows the statistics in a graph or table using the history information PC security check system, characterized in that for controlling the start and end. (a) maintaining the inspection criteria information in the inspection criteria management module; (b) managing the generated log information in the log generating module when the automatic checking is started by the automatic checking module in response to a preset condition; (c) updating, by the latest information updating module, whether the inspection criteria information needs to be updated with the latest information in response to the automatic inspection; (d) collecting the registry, file, and system setting information in the system information collecting module; (e) generating check result information by comparing the system information collected by the system information collecting module with the updated check criterion information; f) generating a history in the history generation module by fusing the log information and the check result information; And (g) showing and automatically correcting the inspection result information in the inspection result management module; PC security check method comprising the. The PC security according to claim 4, wherein the inspection standard management module provides a verified value for the inspection criterion information as a basis, supports modification by a user, and is automatically updated for each item. How to check. The method of claim 4, wherein the history generation module (h) shows a history or a statistic so far.

Images